Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/323830343a336539383a3a2f33322d3332203d3e20323636363038.roa
File:                     323830343a336539383a3a2f33322d3332203d3e20323636363038.roa (raw, json)
Hash identifier:          wcdr72LfyoTWZ4DzrFeviU5IKl1UBUipqmu+Gc+W9CA=
Subject key identifier:   12:CF:52:C3:03:65:9F:83:7A:58:E4:F5:DF:A1:5F:50:A0:8B:6C:E9
Certificate issuer:       /CN=B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A
Certificate serial:       1C80FCD51C49C4C872C6162DAF22BD37E0BCA01E
Authority key identifier: B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/323830343a336539383a3a2f33322d3332203d3e20323636363038.roa
Signing time:             Thu 04 Apr 2024 01:36:26 +0000
ROA not before:           Thu 04 Apr 2024 01:31:26 +0000
ROA not after:            Thu 03 Apr 2025 01:36:26 +0000
asID:                     266608
IP address blocks:        2804:3e98::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.crl
                          rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:80:fc:d5:1c:49:c4:c8:72:c6:16:2d:af:22:bd:37:e0:bc:a0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A
        Validity
            Not Before: Apr  4 01:31:26 2024 GMT
            Not After : Apr  3 01:36:26 2025 GMT
        Subject: CN=12CF52C303659F837A58E4F5DFA15F50A08B6CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:ac:21:91:aa:64:dc:67:7c:4a:72:72:4c:
                    ca:94:da:38:bd:9c:b1:04:ee:f9:a3:79:06:75:6a:
                    24:98:2c:d1:88:59:4e:95:e1:0e:cc:0c:e5:bc:9d:
                    ae:f5:db:e5:0f:08:66:ec:ab:b1:14:51:ab:53:52:
                    7a:79:76:2b:7d:dd:74:82:63:c6:fa:64:b3:09:b4:
                    57:4b:ae:5a:73:a4:03:f4:c8:ed:a3:6e:06:f9:8e:
                    2d:1e:24:f2:52:19:79:08:0c:cf:c3:44:5a:38:79:
                    96:69:c5:6f:90:6e:9b:8f:45:12:11:e0:0c:b7:fc:
                    cf:3c:cc:e2:53:cb:7a:2c:48:08:28:43:a1:62:56:
                    ac:5c:f9:1e:42:20:b1:ef:84:80:d4:2c:d3:95:9a:
                    d0:12:c7:e8:e5:91:1e:3d:b6:27:6b:e0:e6:30:76:
                    fc:c3:e4:70:d0:3b:5b:37:f1:73:ee:9d:5c:0a:f0:
                    53:7d:d0:a3:bc:79:99:0e:4a:50:0b:fb:13:88:3e:
                    e2:56:e8:13:c7:ad:e3:a4:dc:1f:97:e3:14:82:c0:
                    8e:36:fe:f7:3a:aa:d0:a5:d1:0d:eb:46:b9:c8:4b:
                    9e:cb:a7:c8:ff:3c:21:8d:b5:b1:f6:a3:cf:dc:3e:
                    f2:71:d7:3d:dc:4d:8d:3f:9d:ea:b9:6b:ff:10:2c:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CF:52:C3:03:65:9F:83:7A:58:E4:F5:DF:A1:5F:50:A0:8B:6C:E9
            X509v3 Authority Key Identifier:
                keyid:B4:07:2D:8F:E8:FD:8E:8E:A5:D4:A2:6B:77:2D:A8:F8:C2:6D:E9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4072D8FE8FD8E8EA5D4A26B772DA8F8C26DE97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/1/323830343a336539383a3a2f33322d3332203d3e20323636363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e98::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:70:3b:6c:e0:46:5a:41:d6:02:06:bd:02:7e:d1:48:18:fd:
         1f:38:be:18:98:9f:02:b7:3f:44:f1:79:5d:d6:35:45:71:db:
         d8:ec:f6:e5:2e:7d:04:72:14:4d:41:6f:9c:70:13:72:67:22:
         8c:d7:2c:7b:35:06:cc:41:52:ee:6a:1c:f5:f0:c5:a5:7e:65:
         45:6c:7d:59:41:04:23:24:c0:5e:f4:99:c3:33:89:c7:ec:6f:
         24:6f:07:1c:87:b3:f6:42:b9:55:fc:41:27:59:6b:55:38:b5:
         10:d9:bf:36:8d:61:1b:fd:8d:a8:03:f9:e2:ca:09:f1:b4:e7:
         52:5b:06:4b:31:d0:96:d0:35:20:50:ca:60:ed:f5:4c:e2:a1:
         7b:c9:1c:a8:aa:db:70:21:ff:48:c7:14:78:22:9d:1e:80:82:
         9e:c4:a0:c2:6a:0a:c6:26:a5:40:a6:c5:d1:ea:89:e3:6f:a9:
         12:07:cf:b8:c9:e7:d3:b8:7d:ab:5f:09:26:57:4e:f6:f3:c8:
         4a:88:88:0d:86:7d:7f:aa:76:86:9c:2e:5b:30:98:d5:25:db:
         6d:3d:b5:63:48:c8:2f:8e:32:2f:f1:3a:85:72:3b:b1:10:76:
         c5:e9:73:3b:93:65:00:3b:aa:aa:12:96:d3:1a:89:fb:93:c0:
         13:86:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:47 2024 by rpki-client on console-fra.rpki-client.org